CVE-2024-38816-PoC

CVE-2024-38816 प्रूफ ऑफ कॉन्सेप्ट PoC यह CVE-2024-38816 भेद्यता के लिए एक प्रूफ ऑफ कॉन्सेप्ट है, जो एक पथ ट्रैवर्सल शोषण का प्रदर्शन करता है। निष्पादन चरण 1. Docker इमेज बनाएं: Spring Boot 3.0.13, Spring Framework 6.0.3 पर आधारित root@kitploit: docker build -t cve-2024-38816-poc . 2. कंटेनर चलाएं...

CVE-2021-41773

CVE-2021-41773 Playground === Questa è una piccola ricetta Docker per configurare un contenitore basato su Debian bookworm con un'istanza di Apache HTTPd 2.4.49 vulnerabile a CVE-2021-41773. CGI è stato esplicitamente abilitato in modo da poter essere utilizzato per testare/verificare il...

CVE-2026-21440

CVE-2026-21440 PoC avanzato solo di rilevamento per CVE-2026-21440 che interessa AdonisJS BodyParser. Nessuno sfruttamento incluso. CVE-2026-21440 – PoC di rilevamento avanzato per AdonisJS Descrizione Questo progetto fornisce un Proof of Concept PoC avanzato solo di rilevamento per CVE-2026-2144...

CVE-2021-41773

Scanner CVE-2021-41773 Este script testa a vulnerabilidade de path traversal e inclusão local de arquivos no Apache versão 2.4.29. Este script não retorna arquivos locais, apenas verifica o servidor web e informa se ele é vulnerável ou não. Uso: python3 cve-2021-41773-scanner.py Endereço IPv4...

CVE-2025-63298

CVE-2025-63298 È stata identificata una vulnerabilità di path traversal in SourceCodester Pet Grooming Management System 1.0, che interessa il componente admin/managewebsite.php. Un utente autenticato con privilegi amministrativi può sfruttare questa falla inviando una richiesta POST appositament...

CVE-2026-63179

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...

ksmbrace

ksmbrace Ricerca di vulnerabilità in ksmbd , il server SMB3 nel kernel Linux fs/smb/server/. Difetti lato attaccante autenticato sui percorsi durable-handle e di risoluzione dei path di ksmbd. Il nome richiama il tema della race condition di questa linea di lavoro vedi la UAF sul byte-range-lock...

CVE-2018-20250

exp per Estrarre l'esecuzione di codice da Winrar poc di Ridter Come si usa? ti basta installare Python 3.7, preparare un file malevolo da eseguire, impostare i valori che vuoi, questo script exp genererà automaticamente il file archivio malevolo! 1. imposta i valori che vuoi root@kitploit:...

Fast-Google-Dorks-Scan

Veloce Scansione di Google Dorks Il progetto OSINT, la cui idea principale è quella di raccogliere tutte le possibili combinazioni di ricerca Google dorks e trovare informazioni su un sito web specifico: pannelli di amministrazione comuni, tipi di file diffusi e path traversal. Automatizzato al...

CVE-2026-81030

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mageai/api/resources/BrowserItemResource.py passes a caller-supplied path to the filesystem read and write helpers without calling the containment helper that the sibling...

DEBIAN-CVE-2026-34967

Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. An authenticated user can supply path traversal sequences in the ns parameter to write arbitrary .sql files with attacker-controlled conte...

EUVD-2026-66606

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mageai/api/resources/BrowserItemResource.py passes a caller-supplied path to the filesystem read and write helpers without calling the containment helper that the sibling...

CVE-2026-81030

Mage AI through version 0.9.79 is affected by an arbitrary file read via its browser-items API endpoint. The BrowserItemResource in mage_ai/api/resources/BrowserItemResource.py passes a caller-supplied path to filesystem read/write helpers without invoking the containment helper that its sibling ...

CVE-2026-81030 Mage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpoint

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mageai/api/resources/BrowserItemResource.py passes a caller-supplied path to the filesystem read and write helpers without calling the containment helper that the sibling...

CVE-2026-81028

ZLMediaKit 's downloadFile API in server/WebApi.cpp suffers a root-directory confinement bypass caused by a string prefix comparison that does not enforce directory boundaries. The loader builds each configured root via File::absolutePath("", item, true), which omits the trailing separator; the h...

EUVD-2026-66604

ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not account for directory boundaries. The configuration loader in server/WebApi.cpp builds each root with File::absolutePath"", item, true; because the relative-path argument is emp...

CVE-2026-73034-PoC

CVE-2026-73034 — DB-GPT v0.8.1: Path Traversal non autenticato → Scrittura arbitraria di file CVSS 9.8 Critico · CWE-22 · GHSA/Issue 3104 Riepilogo POST /api/v1/python/file/upload in DB-GPT v0.8.1 prende l'header HTTP user-id e lo usa grezzo come componente del percorso : root@kitploit: uploaddir...

CVE-2026-54550

IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...

IzPack has Path Traversal in UnpackerBase that allows writing files outside the installation directory via malicious pack entries

Summary IzPack's UnpackerBase.unpack resolves pack-file target paths without any canonical-path or directory-containment check. An attacker who distributes a trojanized installer JAR the format is unsigned can include pack entries whose targetPath contains ../ sequences. When a victim runs the...

CVE-2026-54550 IzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entries

IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...